6860E 802.1X template compatability

[jagzeer]

Hello

Im deploying Alcatel OS6860E with 802.1x.
Last time we deployed OS6860 running on 8.2.1.258.R01 with no issue.

Now I used the same template for same model but OS is running on 8.4.1.141R03 and having issue with the template .
Even though I have the default profile and some commands already deprecated. Is there any forum or resources that might have a document the latest 802.1x configuraton..

sample configuration for 802.1x below


aaa profile "TEST_AAA"
aaa profile "TES_AAA" device-authentication 802.1x "CPPM01" "CPPM02"
aaa profile "TEST_AAA" accounting 802.1x "CPPM01" "CPPM02"
aaa profile "TEST_AAA" accounting mac "CPPM01" "CPPM02"
aaa profile "TEST_AAA" device-authentication mac "CPPM01" "CPPM02"

unp edge-profile default-profile
unp edge-profile "TEST_10"
unp edge-profile "TEST_10" redirect enable
unp vlan-mapping edge-profile "TEST_10" vlan 10


unp edge-template TEST_TEMPLATE
unp edge-template TEST_TEMPLATE 802.1x-authentication enable
unp edge-template TEST 802.1x-authentication pass-alternate edge-pfile default-profile
ERROR: UNP (default-profile) does not exist
unp edge-template TEST_TEMPLATE mac-authentication enable
unp edge-template TEST_TEMPLATE mac-authentication pass-alternate edge-profile default-profile
ERROR: UNP (default-profile) does not exist
unp edge-template TEST_TEMPLATE aaa-profile "TEST_AAA"


-> unp port 1/1/1 port-type edge
ERROR: Object deprecated

-> unp port 1/1/1 port-type ?
^
BRIDGE ACCESS
(AG Command Set)
-> unp port 1/1/1 port-type access

-> unp port 1/1/1 edge-template TEST

Wed Jan 1 03:03:16 : AGCMM AG-General error message:
+++ alaAgUNPPortTableTest:10953 Deprecated object


ERROR: Object deprecated


Thanks.

Regards,

[silvio]

with R8.3.1 the access Guardian Command where changed to more easier/clearer...
In the Cli and network guide for 8.3.1 and 8.4.1 you will find all the actual commands.
Now there are only two types of unp-ports (before there where three): Bridge port is to use if you would like to map a vlan to the clients (mostly used), Access ports are for service mapping (vxlan or SPB).
regards
Silvio

[jagzeer]

Hi Silvio

Thanks. Forgot to update.

Able to find the details in the guide as you mentioned.

Configure UNP functionality and port type (bridge or access) on the ports that will connect user
devices to the OmniSwitch. Traffic received on bridge ports can be assigned to profiles mapped to a
VLAN (VLAN profiles); traffic received on access ports can be assigned to profiles mapped to a service
(service profiles). For example, the following command enables UNP bridge port type functionality:

Now I can map the ports. I just need to test it out.

Regards,